Something smells phishy
Nov. 3rd, 2008 04:50 pmSo far it's taken over 10 helpdesk calls to sort out find out what's going with the stupid stupid Verified by Vista phishing look-a-like payment site. (MasterCard SecureCode is the same damn thing).
If a payment site:
appears in an embeded iframe (with no way of seeing the URL),
or in a pop-up with out an address bar,
or comes up after I've already entered my card details and asks for them again,
or triggers a javascript XSS warning on noScript,
or only lists a phone number which is not valid ( 0870 154 0121 );
then I'm not going to trust it!
Here are some valid numbers:
0844 811 9111 Customer service: Takes a while to get through the menus but eventually a human told me there was no failed transaction on my account, but there was a £1 charge due to expire on the 10th. However they can't help with the secure.barclaycard site (and as an aside only have access to 6 months of account data).
0870 156 6485 Barclaycard Secure/3D Secure queries: Only for Debit cards, can't help with Credit card problems.
0844 811 9152 Barclaycard Secure/3D Secure queries: Only for Credit card, can't help with debit card. Only one that seems to be based overseas.
They said that the receipt history page isn't receipts, it's a list of attempted transactions. Clearly. The transaction that was showing up on there was a failed transaction. Even though there's no indication of this. I eventually paid again, and apart from a slightly higher Receipt ID the two "receipts" look identical.
Raah!
If I see a site uses Vilified by Visa, or MasterCard SuckyCode, then I'll will first see if there is another payment option. Then see if there is another site selling the same thing. Then consider if I really need to spend money, before going through all this again.
Then the shop downstairs closed as I walked up to it.
Then vending machine wasn't taking pound coins, so I went and got change.
Then it wasn't taking change.
Then the coffee shop had a massive queue.
So no sugar for Dave.
Grr.
If a payment site:
appears in an embeded iframe (with no way of seeing the URL),
or in a pop-up with out an address bar,
or comes up after I've already entered my card details and asks for them again,
or triggers a javascript XSS warning on noScript,
or only lists a phone number which is not valid ( 0870 154 0121 );
then I'm not going to trust it!
Here are some valid numbers:
0844 811 9111 Customer service: Takes a while to get through the menus but eventually a human told me there was no failed transaction on my account, but there was a £1 charge due to expire on the 10th. However they can't help with the secure.barclaycard site (and as an aside only have access to 6 months of account data).
0870 156 6485 Barclaycard Secure/3D Secure queries: Only for Debit cards, can't help with Credit card problems.
0844 811 9152 Barclaycard Secure/3D Secure queries: Only for Credit card, can't help with debit card. Only one that seems to be based overseas.
They said that the receipt history page isn't receipts, it's a list of attempted transactions. Clearly. The transaction that was showing up on there was a failed transaction. Even though there's no indication of this. I eventually paid again, and apart from a slightly higher Receipt ID the two "receipts" look identical.
Raah!
If I see a site uses Vilified by Visa, or MasterCard SuckyCode, then I'll will first see if there is another payment option. Then see if there is another site selling the same thing. Then consider if I really need to spend money, before going through all this again.
Then the shop downstairs closed as I walked up to it.
Then vending machine wasn't taking pound coins, so I went and got change.
Then it wasn't taking change.
Then the coffee shop had a massive queue.
So no sugar for Dave.
Grr.